NASA in Russian Data Breach Exposed 3,425 Russian User Emails

HEROIC analysts identified a data breach tied to RusNASA (rusnasa.ru), a Russian-language news website covering NASA and space science topics. The breach was reported on May 13, 2024, and exposed 3,425 user records, including email addresses, usernames, IP addresses, and hashed passwords.

Why the RusNASA Leak Puts Users at Risk

With email addresses, usernames, and hashed passwords in hand, an attacker can attempt to crack the password hashes offline, then test any recovered passwords against other accounts, a technique known as credential stuffing. The presence of IP addresses in this leak adds another layer of exposure, since it can help an attacker narrow down a user's general location or internet provider alongside their login details.

What the RusNASA Breach Exposed

• Email addresses
• Password hashes
• Usernames
• IP addresses

Why This Matters for RusNASA Users

Even a breach of this size can cause real harm. If any of the 3,425 affected users reused their RusNASA password on another site, especially an email or banking account, that account is now at greater risk of takeover. Hashed passwords are not automatically safe, particularly if the hashing method is outdated or the underlying password was weak or reused. Combined with an IP address, an attacker has enough information to craft a more convincing, targeted phishing attempt.

How a Database Breach Like This Happens

This incident is classified as a database breach, meaning attackers gained direct access to RusNASA's backend user records, likely through a website vulnerability, an unpatched server, or exposed database credentials. Unlike stealer logs or combolists, which are pieced together from malware infections on individual devices, a database breach exposes every account stored on the compromised system at once. That is why even a smaller, regionally focused website like RusNASA can produce a leak affecting thousands of users in a single incident.

Check If Your Information Was Exposed

If you have ever created an account on RusNASA or reused a password across multiple sites, it is worth checking whether your information appears in this or other breaches. HEROIC's free breach scanner searches a database of more than 400 billion leaked records to tell you instantly if your email address has been exposed, so you can change your passwords and secure your accounts before someone else takes advantage.